Huawei Quidway S6500 Series Operation Manual page 110

Operation Manual - Network Protocol
Quidway S6500 Series Ethernet Switches
5.2.6 Allow/Inhibit the Passing of Unknown Machines through DHCP
Security Check
The so called unknown machine is a device which IP and MAC addresses are not
contained in any DHCP security table entry. When unknown machines are inhibited
from passing through the DHCP security check, they cannot access the network even
through they have a legal IP address.
Perform the following configuration in VLAN interface view.
Table 5-6 Allow/inhibit the passing of unknown machines through the DHCP security
check
Inhibit unknown machines from passing
through the DHCP security check
Allow unknown machines to pass
through the DHCP security check
By default, unknown machines are inhibited from passing through the DHCP security
check.
This configuration takes effect only when the DHCP security feature is enabled on the
VLAN interface.
5.3 Displaying and Debugging DHCP
After the above configuration, execute display command in any view to display the
running of the DHCP configuration, and to verify the effect of the configuration. Execute
reset command to reset DHCP related information and debugging command to debug
DHCP.
Table 5-7 Displaying and debugging DHCP
Display the information about the DHCP
Server group
Display the information about the DHCP
Server group corresponding to the
VLAN interface.
Enable the DHCP relay debugging
Disable the DHCP relay debugging
Display the address information of all the
legal clients of the DHCP Server group.
Operation
Operation
Huawei Technologies Proprietary
5-5
Chapter 5 DHCP Configuration
Command
address-check no-matched enable
address-check no-matched disable
Command
display dhcp-server groupNo
display dhcp-server
vlan-interface vlan-id
debugging dhcp-relay
undo debugging dhcp-relay
display dhcp-security [ ip_address |
dynamic | static ]
interface